CVE Intelligence
Analysis AI-assisted

CVE-2026-13796: Google Chrome Chromecast Integer Overflow Enables Possible Sandbox Escape

CVE-2026-13796 is an integer overflow in the Chromecast component of Google Chrome before 150.0.7871.47, as described in the record. A remote attacker who has already compromised the renderer process could potentially escape the sandbox through a crafted HTML page. The record gives a CVSS 3.1 base score of 9.6, and the vendor update is the primary remediation.

Published Oct 13, 2026 · Updated Oct 13, 2026 · Ler em português

Overview

CVE-2026-13796 is described as an integer overflow in the Chromecast component of Google Chrome prior to 150.0.7871.47. The record states that a remote attacker who has already compromised the renderer process could potentially perform a sandbox escape through a crafted HTML page.

Impact

  • A successful sandbox escape would follow renderer process compromise, so it is a second-stage risk rather than a standalone browser compromise.
  • The recorded CVSS 3.1 vector is CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H, which describes network attack, low complexity, user interaction required, scope change, and high impact to confidentiality, integrity and availability. The recorded base score is 9.6.
  • Chromium rates the security severity as High.

Affected products and versions

  • Google Chrome prior to 150.0.7871.47 is the product version boundary given in the description.
  • The record lists two affected entries: versions below 150.0.7871.46, and a range written as 150.0.7871.47 up to but not including 150.0.7871.47. The second entry is internally inconsistent and should be checked against the vendor advisory.
  • The record contains no structured fixed-version list.

Exploitation status

  • The record shows the CISA KEV listing as false. No confirmed exploitation appears in the sources consulted.
  • The SSVC fields in the record show exploitation as none and automatable as no.
  • The EPSS probability is recorded as 0.00319, with a percentile of 0.23127.

Remediation and mitigation

  • Update Google Chrome to version 150.0.7871.47 or later, consistent with the fix threshold in the description.
  • Prioritize browsers used for untrusted web browsing and any fleet where Chrome is deployed broadly.
  • Confirm the fixed build in the vendor release notes linked below, because the record does not provide structured fix data.

Detection guidance

  • Inventory installed Chrome versions and flag hosts running builds below 150.0.7871.47.
  • Check endpoint management and patch tools for successful browser updates.
  • Treat unexpected renderer crashes or browser process anomalies as general signals for review, not as specific indicators of this flaw.

Limitations of the available information

  • The record contains no technical details beyond the description, and this analysis does not add exploit details.
  • The CWE name is missing from the record, although the identifier CWE-472 is present.
  • The affected version data contains an inconsistent entry.
  • The vendor advisory and bug tracker pages were not available as full text in the record.

Frequently asked questions

Is CVE-2026-13796 being actively exploited?

The record shows the CVE is not listed in the CISA KEV catalog. No confirmed exploitation appears in the sources consulted.

Which Chrome version fixes this issue?

The description gives 150.0.7871.47 as the threshold, so builds from that version onward address the flaw according to the record. Confirm the build in the vendor release notes.

What is the severity?

The record gives a CVSS 3.1 base score of 9.6, and Chromium rates the security severity as High.

This analysis was drafted with AI assistance from verified source data and automatically checked against it.